Junior Information Systems Security Officer (ISSO)

About the role

Seeking a Junior Information Systems Security Officer (ISSO) to support cybersecurity and information assurance efforts for a federal customer in Washington, DC. The ideal candidate will have a Top Secret clearance with SCI eligibility, experience in IS security operations, and a strong foundation in cybersecurity tools and frameworks. This on-site role offers an exciting opportunity to contribute to federal cybersecurity programs and advance your career in a dynamic environment.

Job Responsibilities

• Implement, oversee, and continuously monitor security configurations and practices for information systems.
• Serve as liaison between system owners and IS security personnel.
• Ensure security controls are implemented and operating throughout the system lifecycle.
• Maintain and regularly update system security documentation.
• Conduct vulnerability scans and develop Plans of Action and Milestones (POAs & Ms) for remediation.
• Manage risks by coordinating mitigation actions and tracking POA&M completion.
• Coordinate system owner concurrence for corrective actions.
• Monitor security controls to maintain Authorized To Operate (ATO) status.
• Upload security control evidence to Governance, Risk, and Compliance (GRC) applications.
• Report changes affecting authorization status to system owners and security managers.
• Coordinate removal and retirement of decommissioned information systems.
• Recommend security categorizations and authorization boundaries to Authorizing Officials.
• Initiate and coordinate Interconnection Security Agreements and related documentation.
• Review and approve System Security Plans (SSP).
• Schedule and coordinate security control assessments and inspections.
• Advise Authorizing Officials on vulnerabilities and residual risks.
• Ensure completion and testing of all POA&M actions.
• Coordinate event-driven reauthorization processes.

Required skills

Information Systems Security Risk Management Framework (RMF) Federal Information Security Management Act (FISMA) Vulnerability Assessment Plan of Action and Milestones (POA&M) Management Security Documentation Tenable Nessus IBM Guardium HP WebInspect Network Mapper (NMAP) Governance, Risk, and Compliance (GRC) Tools


Preferred skills

Certified Information Systems Security Professional (CISSP) Global Information Security Professional (GISP) CompTIA Advanced Security Practitioner (CASP) DoD Instruction 8570.1 IAM Level I Proficiency Cyber Defense Support Federal Cybersecurity Programs


Education requirements

Degree

Bachelor

Major

Computer Science

Job Requirements

• Must hold a current U.S. Government Top Secret Clearance with SCI eligibility and CI-Polygraph eligibility
• U.S. citizenship is required.
• Minimum 3 years of experience as an Information Systems Security Officer (ISSO) at a cleared facility.
• At least 5 years of work experience in computer science or cybersecurity-related fields.
• Familiarity with security tools such as Tenable Nessus, IBM Guardium, HP WebInspect, and Network Mapper (NMAP).
• Possession of at least one relevant certification: CISSP, GISP, CASP, or equivalent DoD IAM Level I proficiency.
• Strong understanding of Risk Management Framework (RMF) and Federal Information Security Management Act (FISMA) compliance.
• Ability to coordinate and communicate effectively with system owners and security personnel.
• Detail-oriented with strong organizational skills to manage security documentation and POA&Ms.
• Willingness to work on-site in Washington, DC.